Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2017-17858

Опубликовано: 22 янв. 2018
Источник: ubuntu
Приоритет: medium
CVSS2: 6.8
CVSS3: 7.8

Описание

Heap-based buffer overflow in the ensure_solid_xref function in pdf/pdf-xref.c in Artifex MuPDF 1.12.0 allows a remote attacker to potentially execute arbitrary code via a crafted PDF file, because xref subsection object numbers are unrestricted.

РелизСтатусПримечание
artful

ignored

end of life
bionic

ignored

end of standard support, was needed
cosmic

not-affected

1.13.0+ds1-3
devel

not-affected

1.13.0+ds1-3
disco

not-affected

1.13.0+ds1-3
eoan

not-affected

1.13.0+ds1-3
esm-apps/bionic

needed

esm-apps/focal

not-affected

1.13.0+ds1-3
esm-apps/jammy

not-affected

1.13.0+ds1-3
esm-apps/noble

not-affected

1.13.0+ds1-3

Показывать по

6.8 Medium

CVSS2

7.8 High

CVSS3

Связанные уязвимости

CVSS3: 7.8
nvd
около 8 лет назад

Heap-based buffer overflow in the ensure_solid_xref function in pdf/pdf-xref.c in Artifex MuPDF 1.12.0 allows a remote attacker to potentially execute arbitrary code via a crafted PDF file, because xref subsection object numbers are unrestricted.

CVSS3: 7.8
debian
около 8 лет назад

Heap-based buffer overflow in the ensure_solid_xref function in pdf/pd ...

CVSS3: 7.8
github
больше 3 лет назад

Heap-based buffer overflow in the ensure_solid_xref function in pdf/pdf-xref.c in Artifex MuPDF 1.12.0 allows a remote attacker to potentially execute arbitrary code via a crafted PDF file, because xref subsection object numbers are unrestricted.

suse-cvrf
около 8 лет назад

Security update for mupdf

6.8 Medium

CVSS2

7.8 High

CVSS3